Mailing List CGatePro@mail.stalker.com Message #92670
From: Technical Support <support@stalker.com>
Subject: Re: Excessive POP3 sessions.
Date: Thu, 20 Sep 2007 14:45:07 +0400
To: CommuniGate Pro Discussions <CGatePro@mail.stalker.com>
Hello,

Jeff Wark wrote:
Has anyone else noticed this sort of behaviour on his/her POP3 Access Monitor page:

118605    [216.26.223.105]        9min    Unauthenticated       119011    [216.26.218.233]        7min    Unauthenticated       119205    [216.26.218.233]        6min    Unauthenticated       119370    [216.26.223.105]        5min    Unauthenticated       119503    [216.211.72.243]        4min    Unauthenticated       119569    [216.26.223.105]        4min    Unauthenticated       119695    [216.26.216.166]        3min    Unauthenticated       119906    [216.26.216.166]        2min    Unauthenticated       119950    [216.26.223.105]        2min    Unauthenticated       In my case, it started a couple weeks ago with one customer making up to the allowed 5 connections from a single IP address and then just sitting there.  By last week, it was up to two customers and now it appears to be 3 or 4.

Is this a new virus or something?

These appear to be dead connections. On some platforms a dropped connection notification may be not delivered to an application (CGPro here) - so it believes there's on, while the client (or client's firewall) has closed it.

I would check if the IP addresses reported for these hanging connections are always the same and then try to debug connectivity to those client hosts.

--
Best regards,
Dmitry Akindinov

=======================================================================
When answering to letters sent to you by the tech.support staff, make
sure the original message you have received is included into your
reply.
Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster